From fe5ec04749aa51765362cfc44ff8a44d481d37a4 Mon Sep 17 00:00:00 2001
From: zenggang <zenggang@easycorp.ltd>
Date: Thu, 2 Jun 2022 05:22:12 +0000
Subject: [PATCH] * Code for task#55851

---
 module/common/model.php | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/module/common/model.php b/module/common/model.php
index 164a2741d3..1b8503aadd 100644
--- a/module/common/model.php
+++ b/module/common/model.php
@@ -2400,6 +2400,9 @@ EOD;
             if($inProject && $app->session->project && strpos(",{$app->user->rights['projects']},", ",{$app->session->project},") !== false) return true;
         }
 
+        /* White list of method. */
+        if(in_array($module, array('user', 'task', 'story', 'bug', 'testcase')) and $method == 'showimport') return true;
+
         /* If not super admin, check the rights. */
         $rights = $app->user->rights['rights'];
         $acls   = $app->user->rights['acls'];